• info
• discussion
• exploit
• solution
• references

Linux Kernel KVM 'kvm_dev_ioctl_get_supported_cpuid()' Integer Overflow Vulnerability

The Linux kernel is prone to an integer-overflow vulnerability that affects the Kernel-based Virtual Machine (KVM).

Attackers can exploit this issue to execute arbitrary code with superuser privileges. Successful exploits will completely compromise affected computers.

Versions prior to Linux kernel 2.6.32-rc4 are vulnerable.